Transaction Security policies for real-time enforcement
Key Takeaway
To stop a risky action, such as a large report export, at the moment a user tries it, create a Transaction Security policy with a Block action. Transaction Security needs a Salesforce Shield or Salesforce Event Monitoring add-on subscription.
Transaction Security is a framework that watches user activity events in real time, such as logins, report views, and API queries. When an activity matches conditions you set, a policy acts at once. It can block the request, require multi-factor authentication (MFA), or send a notification. A blocked user can't complete the request, so Transaction Security can stop risky activity as it happens.
What a policy is made of
A Transaction Security policy has three parts:
- The event it watches, such as
LoginEventorReportEvent. - The conditions that must be true.
- The real-time action that runs when those conditions are met.